# CVEs published 2011-01-28

34 CVEs were published on January 28, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2777](https://cve.now/CVE-2010-2777.md): Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF (no CVSS)
- [CVE-2010-2778](https://cve.now/CVE-2010-2778.md): Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote a (no CVSS)
- [CVE-2010-2779](https://cve.now/CVE-2010-2779.md): Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-3450](https://cve.now/CVE-2010-3450.md): Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary fi (no CVSS)
- [CVE-2010-3451](https://cve.now/CVE-2010-3451.md): Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-3452](https://cve.now/CVE-2010-3452.md): Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-3453](https://cve.now/CVE-2010-3453.md): The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecifi (no CVSS)
- [CVE-2010-3454](https://cve.now/CVE-2010-3454.md): Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow re (no CVSS)
- [CVE-2010-3689](https://cve.now/CVE-2010-3689.md): soffice in OpenOffice.org (OOo) 3.x before 3.3 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain (no CVSS)
- [CVE-2010-4253](https://cve.now/CVE-2010-4253.md): Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (a (no CVSS)
- [CVE-2010-4643](https://cve.now/CVE-2010-4643.md): Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (a (no CVSS)
- [CVE-2011-0348](https://cve.now/CVE-2011-0348.md): Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24 (no CVSS)
- [CVE-2011-0349](https://cve.now/CVE-2011-0349.md): Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allo (no CVSS)
- [CVE-2011-0350](https://cve.now/CVE-2011-0350.md): Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allo (no CVSS)
- [CVE-2010-4325](https://cve.now/CVE-2010-4325.md): Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbit (no CVSS)
- [CVE-2010-4326](https://cve.now/CVE-2010-4326.md): Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execu (no CVSS)
- [CVE-2010-4710](https://cve.now/CVE-2010-4710.md): Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbi (no CVSS)
- [CVE-2011-0275](https://cve.now/CVE-2011-0275.md): Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote attackers to cause a denial of service via (no CVSS)
- [CVE-2011-0678](https://cve.now/CVE-2011-0678.md): Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2011-0679](https://cve.now/CVE-2011-0679.md): IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, a (no CVSS)
- [CVE-2010-4567](https://cve.now/CVE-2010-4567.md): Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 does not properly handle whitespace preceding a (1) (no CVSS)
- [CVE-2010-4568](https://cve.now/CVE-2010-4568.md): Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does n (no CVSS)
- [CVE-2010-4569](https://cve.now/CVE-2010-4569.md): Cross-site scripting (XSS) vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2010-4570](https://cve.now/CVE-2010-4570.md): Cross-site scripting (XSS) vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote (no CVSS)
- [CVE-2010-4572](https://cve.now/CVE-2010-4572.md): CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allows (no CVSS)
- [CVE-2010-4709](https://cve.now/CVE-2010-4709.md): Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2011-0018](https://cve.now/CVE-2011-0018.md): The email function in manage\_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to exec (no CVSS)
- [CVE-2011-0046](https://cve.now/CVE-2011-0046.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x bef (no CVSS)
- [CVE-2011-0048](https://cve.now/CVE-2011-0048.md): Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 creates a clickable link for a (1) javascript: or ( (no CVSS)
- [CVE-2011-0343](https://cve.now/CVE-2011-0343.md): Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes s (no CVSS)
- [CVE-2011-0520](https://cve.now/CVE-2011-0520.md): The compress\_add\_dlabel\_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to (no CVSS)
- [CVE-2011-0650](https://cve.now/CVE-2011-0650.md): Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the a (no CVSS)
- [CVE-2011-0651](https://cve.now/CVE-2011-0651.md): Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2011-0652](https://cve.now/CVE-2011-0652.md): lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (crash) via a crafted 0x8 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-01-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.